JunkieTheSniffer

JunkieTheSniffer is an open source command-line application specially designed for network administrators and analysts who want to sniff and analyze network packages. It is based on the libpcap library.

With JunkieTheSniffer, administrators will be able to analyze network traffic in real-time. It features a plugin system and a high-level extension language that eases the combination and development of new functionality.

JunkieTheSniffer features threaded packet capture, modular architecture, portable (based on libpcap), and well tested on professional settings.

Designed to be modular enough to fulfill various different tasks, JunkieTheSniffer can be a helpful companion to the modern network analyst and system administrator.

What is new in this release:

• This version fixes several file descriptors leaks and a segfault in OpenSSL when decoding unknown cipher suites.

What is new in version 2.6.2:

• This version fixes handling of the Session Tickets TLS extension and TLS decryption of CAMELIA cypher suite.

What is new in version 2.6.0:

• A new Delayogram plugin to visualize ack delays.
• A new -f option to set the next capture filters from the command line.
• Support for Eth QinQ(inQ...), DHCP protocol.
• Autodiscovery of IRC, jabber, VNC, CIFS, PCanywhere, citrix, telnet, BGP, IMAP, POP, and NTP.

What is new in version 2.5.0:

• This version adds a new parser for TLS (with optional decryption a la ssldump) and SKINNY protocols, reordering of all TCP traffic by default, and a new interactive plugin, NetTop, to display a top of current flows.

What is new in version 2.4.3:

• This version adds many fixes, more or less important depending on which feature set you use.
• It's probably the last 2.4 version.

What is new in version 2.4.0:

• This version extracts more information from HTTP and provides more robust handling of missing TCP segments.